SQL Injection Teaching Based on SQLi-labs

SQL Injection Teaching Based on SQLi-labs

연구 분야: Databases

학회: 2020 IEEE 3rd International Conference on Information Systems and Computer Aided Education (ICISCAE)

SQL injection attack is one of the most common methods of hacker attack, which is very harmful. In the course of information system security in our school, SQL injection attack and prevention is one of the most important and difficult contents in teaching. SQLi-labs is a teaching assistant software with various SQL injection vulnerabilities. With the help of this software, teacher can carry out SQL injection attacks in class, which help students better master the principle of SQL injection attack and prevention. This paper takes Union SQL injection as an example to introduce the teaching implementation process based on SQLi-labs. Teaching practice shows that this teaching mode increases the interest of students' learning and achieves good learning effect.